OpenSSH client host key re-exchange use-after-free (CVE-2026-60002)

Summary

A server changing its host key during re-exchange may corrupt client memory.

Vulnerability ID	Vulnerability Overview
CVE-2026-60002	The SSH client can access freed memory when a server changes its host key during key re-exchange. This issue occurs on the client side and may compromise client process stability or security.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices